Published: 19/05/2006 Updated: 31/05/2014

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 520

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Buffer overflow in MP3Info 0.8.4 allows malicious users to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mp3info mp3info 0.8.4

Debian Bug report logs - #368207 mp3info: CVE-2006-2465: buffer overflow via command-line argument Package: mp3info; Maintainer for mp3info is Paweł Więcek <coven@debianorg>; Source for mp3info is src:mp3info (PTS, buildd, popcon) Reported by: Alec Berryman <alec@thenednet> Date: Sat, 20 May 2006 14:48:12 UTC Se ...

# Waste of CPU clock N2 # Exploit for: mp3info! Latest version # Author: jsacco - jsacco@exploitpackcom # Vendor: ibiblioorg/mp3info/ # No-one-cares-about programs! junk = "\x90\x90\x90\x90"*8 shellcode = "\x31\xc0\x50\x68//sh\x68/bin\x89\xe3\x50\x53\x89\xe1\x99\xb0\x0b\xcd\x80" buffer = "\x90\x90\x90\x90"*89 eip = "\x10\xf0\xff\xbf" pr ...

# Exploit Title: mp3info SEH exploit # Date: 18 March 2014 # Exploit Author: Ayman Sagy <aymansagy [at] gmailcom> # Vendor Homepage: ibiblioorg/mp3info/ # Software Link: wwwexploit-dbcom/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-085atgz # Version: MP3Info 085 # Tested on: Windows 7 Ultimate 64 and 32 bit # CVE : 20 ...

NVD-CWE-Other http://www.securiteam.com/exploits/5GP0E15IKO.html http://www.securityfocus.com/bid/18016 http://securitytracker.com/id?1016108 http://www.exploit-db.com/exploits/32358 http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html http://osvdb.org/show/osvdb/30945 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368207 https://nvd.nist.gov https://www.exploit-db.com/exploits/31220/

CVE-2006-2465

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect